From c5130205d4f39efad85ba3772458c486ce7650ad Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 21 Nov 2023 15:55:46 +0000 Subject: [PATCH] Bump anchore/sbom-action Bumps [anchore/sbom-action](https://github.com/anchore/sbom-action) from ace0b9722a703812d78949ee4ac5b90de1c0eba2 to 9d0277c4f7c4c8a6ebe323384e43ce9eea504265. - [Release notes](https://github.com/anchore/sbom-action/releases) - [Commits](https://github.com/anchore/sbom-action/compare/ace0b9722a703812d78949ee4ac5b90de1c0eba2...9d0277c4f7c4c8a6ebe323384e43ce9eea504265) --- updated-dependencies: - dependency-name: anchore/sbom-action dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- .github/workflows/super-devsecops.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/super-devsecops.yml b/.github/workflows/super-devsecops.yml index 9b9a9ac..2548420 100644 --- a/.github/workflows/super-devsecops.yml +++ b/.github/workflows/super-devsecops.yml @@ -39,7 +39,7 @@ jobs: - name: Checkout the code uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - name: Scan the source code and upload dependency results - uses: anchore/sbom-action@ace0b9722a703812d78949ee4ac5b90de1c0eba2 + uses: anchore/sbom-action@9d0277c4f7c4c8a6ebe323384e43ce9eea504265 with: path: . dependency-snapshot: true @@ -199,7 +199,7 @@ jobs: docker build -t ghcr.io/stormsinbrewing/savvy-devsecops . docker push ghcr.io/stormsinbrewing/savvy-devsecops - name: Image SBOM Scan with Syft - uses: anchore/sbom-action@ace0b9722a703812d78949ee4ac5b90de1c0eba2 + uses: anchore/sbom-action@9d0277c4f7c4c8a6ebe323384e43ce9eea504265 with: image: "ghcr.io/stormsinbrewing/savvy-devsecops" dependency-snapshot: true